CVE-2026-117883 is a use-after-free vulnerability in the DOM HTML Parser component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is classified with high impact by Mozilla.
CVE-2026-117884 is a use-after-free vulnerability in the Networking component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No evidence of exploitation in the wild has been reported.
CVE-2026-117887 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This vulnerability has been addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The issue could potentially lead to memory safety problems if exploited.
CVE-2026-117880 is a use-after-free vulnerability in the XML component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability has a high impact rating according to the Mozilla advisory. No public exploits or in-the-wild exploitation have been reported. Users should update to the fixed versions to mitigate the risk.
CVE-2026-117888 is a high-impact vulnerability involving uninitialized memory in the Graphics: Canvas2D component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability could potentially lead to security issues due to improper memory handling in the Canvas2D graphics subsystem.
CVE-2026-117879 is a vulnerability involving incorrect boundary conditions in the Layout: Tables component of Firefox. This issue was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability has a high impact rating according to the Mozilla advisory. No known exploits in the wild have been reported.
CVE-2026-117882 is a use-after-free vulnerability in the Layout component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No public exploits or in-the-wild exploitation have been reported as of the advisory date.
CVE-2026-117875 is a use-after-free vulnerability in the Layout: Scrolling and Overflow component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No evidence of exploitation in the wild has been reported.
CVE-2026-117877 is a use-after-free vulnerability in the Layout: Text and Fonts component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla, but there are no known exploits in the wild at this time.
CVE-2026-117873 is a high-impact vulnerability involving incorrect boundary conditions in the Audio/Video Playback component of Firefox. This flaw was addressed and fixed in Firefox 159 and corresponding ESR releases 115.44 and 153.6. The issue could potentially lead to security risks if exploited, but no known exploits are reported in the wild.
CVE-2026-117872 is a use-after-free vulnerability in the JavaScript: Standard Library component of Firefox. This flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability has a high impact rating according to the Mozilla advisory but no public exploits or in-the-wild exploitation have been reported.
CVE-2026-117874 is a use-after-free vulnerability in the Internationalization component of Firefox. This security flaw was addressed and fixed in Firefox 159 and the corresponding Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by Mozilla, indicating serious security concerns if exploited.
CVE-2026-117870 is a use-after-free vulnerability in the JavaScript Engine component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability has a high impact rating according to the Mozilla advisory but there are no known exploits in the wild at this time.
Electrum versions 4.6.0 up to but not including 4.7.2 contain an authorization bypass vulnerability in the external plugin loader. This flaw allows a rogue local process with write access to the Electrum data directory to place malicious plugin code in the plugins/ folder and mark it enabled in the configuration file. The plugin's __init__.py module is executed without verifying the plugin-password signature, enabling arbitrary code execution within the Electrum process.
CVE-2026-117871 is a high-impact vulnerability involving an invalid pointer in the Graphics component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The issue was reported by Mozilla and is part of a set of multiple high-impact vulnerabilities resolved in the same release cycle.
CVE-2026-117876 is a use-after-free vulnerability in the Layout: Text and Fonts component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact severity by the vendor.
Electrum versions prior to 4.7.2 have a vulnerability in the Nostr Wallet Connect plugin that allows attackers to bypass the spending limit. This is due to non-atomic budget checks and truncation of millisatoshi amounts, enabling malicious clients to exceed the daily spending limit by exploiting concurrent requests or repeated payments of fractional satoshis.
CVE-2026-117860 is a same-origin policy bypass vulnerability in the DOM Navigation component of Firefox. This security flaw allows bypassing the browser's same-origin policy, which is critical for web security. The issue was fixed in Firefox 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla. No known exploits in the wild have been reported.
CVE-2026-117868 is a high-impact sandbox escape vulnerability in the DOM Networking component of Firefox. It allows an attacker to break out of the browser's sandbox environment, potentially leading to unauthorized actions or access. This vulnerability was fixed in Firefox 159 and corresponding ESR releases.
CVE-2026-117862 is a high-impact privilege escalation vulnerability in the Networking component of Firefox. It arises from incorrect boundary conditions that could allow an attacker to escalate privileges. This issue was fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6.